Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d0ee6e05-4b23-37a9-8963-5769cf101f95.roa
File: d0ee6e05-4b23-37a9-8963-5769cf101f95.roa (raw, json)
Hash identifier: ugcIMnHyLpCvxpASd0RoOHsjvOLL6eCfU3pAeuJahUY=
Subject key identifier: 81:31:E6:40:39:1A:8C:AB:63:59:96:71:C0:CD:26:5B:EC:D7:21:9D
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584312B488BB376D3014EFBC6900
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d0ee6e05-4b23-37a9-8963-5769cf101f95.roa
Signing time: Fri 01 Sep 2023 01:00:22 +0000
ROA not before: Fri 01 Sep 2023 01:00:22 +0000
ROA not after: Thu 30 Nov 2023 02:00:22 +0000
asID: 60558
IP address blocks: 172.98.179.0/24 maxlen: 24
172.98.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:12:b4:88:bb:37:6d:30:14:ef:bc:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Sep 1 01:00:22 2023 GMT
Not After : Nov 30 02:00:22 2023 GMT
Subject: CN=55198f1b-fe88-4a7e-bba4-16856670266a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:72:20:0e:0c:07:a9:11:ee:85:12:c7:09:c6:
61:3d:7f:7c:6c:f7:cd:69:09:3d:43:73:ab:20:f6:
81:67:64:07:09:bd:38:e5:ff:2c:78:7f:39:06:8c:
d9:0c:a6:74:58:4c:94:a1:3d:2f:97:21:e6:7e:84:
48:9c:3b:13:ef:52:41:b0:8f:aa:e4:6b:72:5a:62:
06:61:a3:77:31:d9:27:ce:ca:e8:bf:e2:cc:1c:f2:
2e:7c:23:e7:3d:f9:27:13:93:a0:8a:f9:dd:0d:11:
ee:3b:4f:b2:e5:e1:2d:9d:cc:71:b8:83:24:18:47:
45:24:db:7b:67:8c:78:b3:d0:d8:04:29:8d:5a:5a:
a4:86:1b:de:24:12:50:1b:c2:ba:11:fe:d7:8c:e5:
52:d8:e0:f0:25:84:a3:3e:89:14:28:fa:8d:40:1a:
95:4f:f3:00:43:1f:0e:22:cd:48:2e:28:d9:a8:91:
c8:87:7d:38:91:55:21:6f:4d:4d:e8:6b:a0:45:ad:
3f:1e:1c:fe:e7:d5:d7:46:1b:03:bc:85:c9:1b:77:
f7:20:c3:ab:08:51:0e:f2:7e:7c:b1:4b:7f:d2:74:
15:14:72:9d:ee:12:4f:9d:5e:1e:d8:1b:fd:f0:6a:
38:34:18:17:60:03:6f:b2:a1:85:af:4a:46:61:9b:
66:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:31:E6:40:39:1A:8C:AB:63:59:96:71:C0:CD:26:5B:EC:D7:21:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d0ee6e05-4b23-37a9-8963-5769cf101f95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.169.0/24
172.98.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:34:d9:a2:6f:bf:da:44:bc:44:03:37:d0:84:21:86:16:49:
98:dc:20:6c:49:77:f4:92:1c:5b:bd:2b:82:55:be:31:95:62:
0d:d8:10:d8:4d:b2:fa:fa:cd:d3:60:b2:16:85:a8:37:9c:7d:
18:86:5a:6e:ef:be:a3:c0:af:ea:bd:59:26:78:0f:5c:5e:f3:
6b:9c:a9:77:5b:9a:42:5c:74:1f:a4:5e:96:66:6c:97:c9:21:
20:db:c4:6f:cc:c8:e0:a4:b9:77:e1:e8:c4:84:d3:10:ac:65:
79:2d:28:14:c1:c5:f9:28:91:38:71:37:f3:99:0c:9a:88:b8:
d9:81:16:54:79:99:58:8d:0c:c1:39:c5:9b:09:e5:56:ec:98:
70:43:00:fb:12:36:24:ef:dc:72:5d:0c:80:9e:4d:a5:68:c4:
7a:f1:dd:62:1b:93:8e:14:11:59:a2:c1:24:13:6e:65:cc:48:
e5:34:a9:3b:4c:20:e6:c6:c9:74:52:bd:f1:d7:db:51:3b:d6:
92:99:2c:2e:c6:82:32:9a:9d:d2:1c:7e:d0:64:bb:67:9e:9f:
1e:61:3a:62:2a:46:a3:bd:a8:35:46:52:5b:0e:e9:ed:2a:70:
f3:78:aa:76:b2:a3:9f:e2:cd:cd:e6:3d:da:a0:ae:62:fa:0c:
55:74:75:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:32 2024 by rpki-client on console-ams.rpki-client.org